CVE-2024-7261

🗓️ 03 Sep 2024 02:10:25Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 80 Views

Improper neutralization of special elements in Zyxel firmwar

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-7261	3 Sep 202405:45	–	circl
CNNVD	Zyxel多款产品操作系统命令注入漏洞	3 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-7261	3 Sep 202402:10	–	cvelist
EUVD	EUVD-2024-48208	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Zyxel Access Points and Secure Routers	3 Sep 202409:45	–	ncsc
NVD	CVE-2024-7261	3 Sep 202403:15	–	nvd
Positive Technologies	PT-2024-6139 · Zyxel · Wax655E +4	2 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-7261	5 Feb 202511:35	–	redhatcve
The Hacker News	Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers	4 Sep 202411:27	–	thn
Vulnrichment	CVE-2024-7261	3 Sep 202402:10	–	vulnrichment

NVD

Node

zyxel nwa110ax_firmwareRange<7.00(abtg.2)

AND

zyxel nwa110axMatch-

Node

zyxel nwa1123-ac_pro_firmwareRange<6.28(abhd.3)

AND

zyxel nwa1123-ac_proMatch-

Node

zyxel nwa1123acv3_firmwareRange<6.70(abvt.5)

AND

zyxel nwa1123acv3Match-

Node

zyxel nwa130be_firmwareRange<7.00(acil.2)

AND

zyxel nwa130beMatch-

Node

zyxel nwa210ax_firmwareRange<7.00(abtd.2)

AND

zyxel nwa210axMatch-

Node

zyxel nwa220ax-6e_firmwareRange<7.00(acco.2)

AND

zyxel nwa220ax-6eMatch-

Node

zyxel nwa50ax_firmwareRange<7.00(abyw.2)

AND

zyxel nwa50axMatch-

Node

zyxel nwa50ax_pro_firmwareRange<7.00(acge.2)

AND

zyxel nwa50ax_proMatch-

Node

zyxel nwa55axe_firmwareRange<7.00(abzl.2)

AND

zyxel nwa55axeMatch-

Node

zyxel nwa90ax_firmwareRange<7.00(accv.2)

AND

zyxel nwa90axMatch-

Node

zyxel nwa90ax_pro_firmwareRange<7.00(acgf.2)

AND

zyxel nwa90ax_proMatch-

Node

zyxel usg_lite_60ax_firmwareRange<v2.00(acip.3)

AND

zyxel usg_lite_60axMatch-

Node

zyxel wac500_firmwareRange<6.70(abvs.5)

AND

zyxel wac500Match-

Node

zyxel wac500h_firmwareRange<6.70(abwa.5)

AND

zyxel wac500hMatch-

Node

zyxel wac6103d-i_firmwareRange<6.28(aaxh.3)

AND

zyxel wac6103d-iMatch-

Node

zyxel wac6502d-s_firmwareRange<6.28(aase.3)

AND

zyxel wac6502d-sMatch-

Node

zyxel wac6503d-s_firmwareRange<6.28(aasf.3)

AND

zyxel wac6503d-sMatch-

Node

zyxel wac6552d-s_firmwareRange<6.28(abio.3)

AND

zyxel wac6552d-sMatch-

Node

zyxel wac6553d-e_firmwareRange<6.28(aasg.3)

AND

zyxel wac6553d-eMatch-

Node

zyxel wax300h_firmwareRange<7.00(achf.2)

AND

zyxel wax300hMatch-

Node

zyxel wax510d_firmwareRange<7.00(abtf.2)

AND

zyxel wax510dMatch-

Node

zyxel wax610d_firmwareRange<7.00(abte.2)

AND

zyxel wax610dMatch-

Node

zyxel wax620d-6e_firmwareRange<7.00(accn.2)

AND

zyxel wax620d-6eMatch-

Node

zyxel wax630s_firmwareRange<7.00(abzd.2)

AND

zyxel wax630sMatch-

Node

zyxel wax640s-6e_firmwareRange<7.00(accm.2)

AND

zyxel wax640s-6eMatch-

Node

zyxel wax650s_firmwareRange<7.00(abrm.2)

AND

zyxel wax650sMatch-

Node

zyxel wax655e_firmwareRange<7.00(acdo.2)

AND

zyxel wax655eMatch-

Node

zyxel wbe530_firmwareRange<7.00(acle.2)

AND

zyxel wbe530Match-

Node

zyxel wbe660s_firmwareRange<7.00(acgg.2)

AND

zyxel wbe660sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "NWA1123ACv3 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ABVT.4)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAC500 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ABVS.4)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAX655E firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACDO.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WBE530 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACLE.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG LITE 60AX firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "V2.00(ACIP.2)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-in-aps-and-security-router-devices-09-03-2024

13 Sep 2024 19:39Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.27875

SSVC

CWE-78